order2024-10-07_174915[.]exe | Triage

Sharing

General

Target

order2024-10-07_174915.exe
Size

560KB
MD5

4351cdd212b361f999d8bfad8fceceee
SHA1

34dc372ecb6165c1016b502c93657db789d31203
SHA256

963574e90ebf7786aaf6a17966441068baeadbce658ddd2f19af9a9f3f34c7cc
SHA512

540d1001d9e9cd82dc2db8b85cb1d5068707706a82e7cd68486fee7920a78718f991a28514c09d1b7683be8f0f3884293d6dfd05aeb8b531683909a61a1368e8
SSDEEP

12288:Rf0WyyKslE29kc/4FWLjzyd/wdqs7V3+vy7ox15GUB:Ry291gW/ETwVOvJlG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
order2024-10-07_174915.exe

Files

order2024-10-07_174915.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fSYT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ